Stay ahead of the headlines

Jul 31, 2024·mobihealthnews

Abridge, Epic, and Mayo Clinic have partnered to develop a generative AI documentation platform that integrates Abridge’s AI tools into Epic’s EHR system, specifically for Mayo Clinic nurses. Established in 2018, Abridge provides an AI tool that records, transcribes, and organizes medical conversations, summarizing key information like health conditions and care plans. The new platform aims to streamline nursing workflows and is expected to be available by the end of 2024. This collaboration leverages Abridge’s AI capabilities, Epic’s developmental resources, and Mayo Clinic’s nursing expertise. Abridge recently raised significant funding and has secured multiple partnerships to expand its clinical documentation tools across various health systems.

Jul 31, 2024·The Register

Microsoft's Azure cloud services faced a global outage, impacting users' ability to access multiple Microsoft 365 services and features. The issues started around 1130 UTC, and affected areas included Portal connectivity and visibility of various resources. Microsoft attributed the problems to its network infrastructure and Azure Front Door service, exacerbated by an unexpected usage spike. Despite implementing network configuration changes and failovers to provide relief, users continued experiencing intermittent errors and latency. Microsoft's ongoing efforts to restore service include additional mitigation measures, though side effects persist in specific regions. The outage also disrupted crucial services such as the UK Court system. Microsoft is actively monitoring the situation to ensure full recovery.

Jul 31, 2024·crn.com

Amazon Web Services (AWS) experienced a significant outage, impacting various Amazon-owned services and businesses, including Whole Foods, Alexa devices, and Amazon delivery operations. The issue originated from increased contention in the Kinesis data processing subsystem within the US-EAST-1 region. This degradation affected multiple AWS services, including CloudWatch, ECS Fargate, and API Gateway. AWS engineers identified the root cause and were working to resolve it, but recovery progress was slower than expected. The outage also disrupted other Amazon-owned services such as Ring and Goodreads.

Jul 30, 2024·Los Angeles Times

A recent Gartner survey highlights that chief information security officers (CISOs) who prioritize response and recovery alongside prevention deliver more value than those focused solely on prevention. The report suggests CISOs should develop cyber fault tolerance, minimize their toolsets to essential technologies, and build a resilient cyber workforce. Key recommendations include focusing on adaptive strategies for generative AI and third-party risks, eliminating redundant tools, and fostering a workforce culture that supports resilience and learning from failures. By embracing these strategies, organizations can better navigate the increasing prevalence and impact of cyberattacks.

Jul 30, 2024·nbcnews.com

CrowdStrike, a leading U.S. cybersecurity company, reported a breach where a hacker leaked internal data on hacker groups it monitors and threatened to reveal more sensitive information. The leaked data, which includes details on 244 hacker groups, largely mirrors CrowdStrike’s publicly available information but also allegedly contains “Indicators of Compromise” used by cybersecurity experts. The hacker, identified as USDoD, posted the data on BreachForums, a major hacker forum. This leak follows shortly after CrowdStrike admitted responsibility for a massive computer crash caused by a software update error, indicating no direct link between the two incidents. CrowdStrike stated that the stolen data was likely taken in June.

Jul 30, 2024·bleepingcomputer

A recent report by TRM Labs highlights that Russian-speaking cybercriminals dominated the ransomware landscape in 2023, accounting for 69% of the total illicit crypto proceeds, amounting to over $500 million. Major players like LockBit and BlackCat collectively collected $320 million in ransom payments. Additionally, Russian dark web markets represented 95% of global sales for illicit items and services, generating $1.4 billion in transactions compared to $100 million from Western counterparts. The report also noted Russia's significant role in cryptocurrency money laundering, with platforms like Garantex handling substantial amounts to fund military supplies from China for the conflict in Ukraine. TRM attributes this predominance to historical, regulatory, and geopolitical factors.

Jul 30, 2024·warontherocks

The article discusses the U.S. military's ongoing challenge to train and retain skilled cyber personnel and advocates for the creation of a dedicated Cyber Force as a long-term solution. Due to the slow process of establishing this new force, the article recommends interim measures to address current shortcomings. These include prioritizing specialization in cyber roles, providing job-specific training, redesigning career paths, and revamping incentive pay programs to better retain talent. The suggested changes aim to improve the Army's efficacy in cyber operations and prepare it for the future establishment of a Cyber Force.

Jul 30, 2024·pcmag.com

Microsoft has provided additional information regarding the recent crashes involving Windows and CrowdStrike software. The issue stemmed from a compatibility conflict that caused systems to crash, affecting users who rely on both Windows and CrowdStrike. Microsoft is currently working with CrowdStrike to resolve the problem and prevent future occurrences, while advising affected users to follow specific troubleshooting steps provided by the companies.

Jul 30, 2024·Healthcare IT News

The U.S. Department of Health and Human Services (HHS) announced a restructuring aimed at enhancing strategy and policymaking for IT, cybersecurity, data, and AI. Responsibilities will be redistributed among three agencies, with the Office of the National Coordinator for Health IT (ONC) rebranded to include broader technology and policy roles. Key positions, including Chief Technology Officer and Chief AI Officer, will oversee respective strategies and governance. This restructuring supports President Biden’s executive order on AI and aims to improve HHS’s adaptability and strategic initiatives in these critical areas.

Jul 30, 2024·cyberscoop

The Biden administration’s cybersecurity policy marks a notable shift, aiming to shift the burden of protection from consumers to the private sector responsible for technology and critical infrastructure. This strategy is implemented across 16 critical infrastructure sectors, introducing new regulations and voluntary initiatives to establish minimum security standards. Despite facing criticism for the extent of these changes, the administration has pushed forward, influenced by high-profile cyberattacks like those on Colonial Pipeline and JBS. Key elements of this policy include executive orders, the Secure by Design initiative, and mandatory incident reporting legislation. However, the effort is navigating complex challenges such as legal ambiguities post-Supreme Court rulings and resistance from some industry sectors and Republican legislators. Overall, while progress is acknowledged, stakeholders continue to debate the effectiveness and scope of these regulatory measures.

Jul 30, 2024·Becker's Hospital Review

A recent report by Parametrix Solutions estimates that the healthcare industry could face losses of $1.9 billion due to a CrowdStrike IT outage caused by a faulty software update on July 19. The update resulted in widespread Windows system crashes, significantly impacting the healthcare and banking sectors in the U.S. According to the report, 75% of firms in these sectors experienced direct financial impacts. The insights were derived from analyzing over 54 billion data points related to cloud service performance. Meanwhile, CrowdStrike CEO George Kurtz announced that over 97% of Windows sensors affected by the outage have been restored.

Jul 30, 2024·Cleveland Clinic Newsroom

Cleveland Clinic has appointed Ben Shahshahani, Ph.D., as its first Chief Artificial Intelligence Officer to spearhead AI implementation across the health system. With over two decades of experience in AI and machine learning, Shahshahani will develop and execute an enterprise AI strategy aimed at improving patient care, caregiver experience, and organizational efficiencies. Reporting to Chief Digital Officer Rohit Chandra, Ph.D., Shahshahani will focus on leveraging AI while adhering to safety, ethical standards, and data security regulations. His previous roles include senior positions at SiriusXM, Pandora, Verizon Media/Yahoo, Google, Nuance, and IBM.

Jul 29, 2024·wired.com

OpenAI has announced SearchGPT, a prototype search engine leveraging generative AI to enhance users' search experiences by providing conversational query responses and relevant links. The tool integrates data from publishers under licensing agreements and aims to compete with existing AI search engines from Google and Microsoft. Although no demo is provided for WIRED, OpenAI confirms the tool is being tested with partners. The strategy marks OpenAI's diversification efforts amid high operational costs and intense competition from companies like Google, which have rapidly advanced their generative AI capabilities.

Jul 29, 2024·Healthcare IT News

The U.S. Department of Health and Human Services (HHS) is undergoing a restructuring to enhance its strategies and policies in information technology, cybersecurity, data, and artificial intelligence. This effort will streamline responsibilities across the Office of the National Coordinator for Health IT (ONC), now renamed the Assistant Secretary for Technology Policy/ONC (ASTP/ONC), the Assistant Secretary for Administration (ASA), and the Administration for Strategic Preparedness and Response (ASPR). Key roles like the Chief Technology Officer, Chief Data Officer, and Chief AI Officer will now fall under ASTP/ONC. This move aligns with President Biden’s Executive Order on AI, emphasizing secure and trustworthy AI practices. The restructuring aims to ensure HHS effectively leverages technological advancements to benefit public health and safety.

Jul 29, 2024·Becker's Hospital Review

The Senate Health, Education, Labor and Pensions Committee has voted to subpoena Ralph de la Torre, CEO of the bankrupt for-profit health system Steward Health Care, and investigate the company’s bankruptcy. This decision marks the first subpoena issued by the committee since 1981 and follows Steward’s Chapter 11 bankruptcy filing on May 11. The subpoena requires de la Torre to testify on September 12 regarding the ramifications of the bankruptcy on patient care. Despite recent findings of some room for patient care improvement, independent reports conclude that all Steward hospitals remain safe for patient care. Steward Health Care plans to address the subpoena with relevant committee staff, acknowledging the need for transparency.

Jul 29, 2024·Wall Street Journal

Crowdstrike CEO George Kurtz attributed a global tech outage to a failure within Microsoft Windows systems. The disruption highlighted potential vulnerabilities in widely used software platforms, sparking discussions on the importance of robust cybersecurity measures and the need for increased resilience in technology infrastructure.

Jul 29, 2024·Fox News

Security researchers have identified new Mac malware that disguises itself as the legitimate and popular browser, Arc. This malware is distributed through Google Ads that redirect users to a fake download site, prompting users to bypass Mac security measures to install it. Once installed, the malware, named Poseidon, steals sensitive data like passwords and cryptocurrency wallets and sends it to a control panel accessible to cybercriminals. Despite Google's verification processes, bad actors managed to exploit Google Ads to spread this malware. Users are advised to follow security best practices such as bookmarking trusted sites and using strong antivirus protection. In response, Google has suspended the offending advertiser's account for policy violations.

Jul 29, 2024·publication

CrowdStrike experienced a significant issue with a software update for its Falcon sensor, which was live for 78 minutes on July 19, 2024. The faulty update caused widespread IT network disruptions and system crashes on Windows devices running versions 7.11 and above. Despite quickly reverting the update, many systems were already affected, necessitating manual remediation efforts across various sectors. CrowdStrike clarified that the issue was not due to a cyberattack and provided remediation guidance on its blog. This incident highlighted vulnerabilities in automated software deployment and its expansive impact on businesses worldwide.

Jul 29, 2024·NBC News

Warren Buffett's Berkshire Hathaway expressed caution at its annual investor meeting about cyber insurance, advising agents to sell such policies only when necessary due to the unpredictable scale of potential losses. This caution was underscored by a recent global IT outage caused by a CrowdStrike quality control issue, which affected various sectors including transportation and healthcare. While some experts like Gerald Glombicki of Fitch Ratings believe that the industry has largely priced in such risks and can manage the losses, others such as Josephine Wolff of Tufts University foresee significant business interruption claims and potential litigation arising from such incidents. The episode highlights the complexities and evolving nature of the cyber insurance market, emphasizing the need for better risk assessment and potentially more standardized policies.

Jul 29, 2024·Business Insider

The CrowdStrike outage on Friday caused significant disruptions globally, affecting airlines, delivery services, stores, and amusement parks, with potential economic damages reaching tens of billions of dollars. CrowdStrike is liable only for refunding subscription fees and not for business interruption losses. Companies are turning to their cyber insurance policies, though payouts may be slow and less than the actual losses incurred. The incident underscores the increased reliance on and potential risks of cyber insurance, especially for large businesses with negotiated terms. Observers note the irony of the outage resulting from protective software updates and anticipate lasting impacts on the cyber insurance industry.